Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a353a3a2f34382d3438203d3e20323732393532.roa
File: 323830313a3162393a353a3a2f34382d3438203d3e20323732393532.roa (raw, json)
Hash identifier: ns/54Dewtow2aVKVc0Sex6+oy/nXClAyVFX8h1stKOk=
Subject key identifier: F8:F1:F8:07:26:20:D1:FA:B7:91:2A:DE:29:0E:E4:89:48:54:2E:53
Certificate issuer: /CN=721723EE6C96BAE63225C18652977F8E404DBD28
Certificate serial: 793741EDB1CA6099BBED8C65D3FBFE4A625D5D90
Authority key identifier: 72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a353a3a2f34382d3438203d3e20323732393532.roa
Signing time: Tue 04 Feb 2025 18:13:49 +0000
ROA not before: Tue 04 Feb 2025 18:08:49 +0000
ROA not after: Tue 03 Feb 2026 18:13:49 +0000
asID: 272952
IP address blocks: 2801:1b9:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:37:41:ed:b1:ca:60:99:bb:ed:8c:65:d3:fb:fe:4a:62:5d:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721723EE6C96BAE63225C18652977F8E404DBD28
Validity
Not Before: Feb 4 18:08:49 2025 GMT
Not After : Feb 3 18:13:49 2026 GMT
Subject: CN=F8F1F8072620D1FAB7912ADE290EE48948542E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:b5:0e:df:f0:b5:97:15:9e:f8:b9:e5:14:
c8:e5:b6:79:f3:fb:32:55:45:6a:b4:46:f3:fa:e1:
c8:99:9b:2f:31:26:cc:15:c9:d2:a8:e8:c8:0c:b8:
d6:2d:1a:e4:43:5e:46:98:2e:08:be:b5:9f:34:9f:
1b:90:ab:ff:de:38:b8:6f:cd:1a:e6:ab:45:c9:3c:
3d:54:80:35:53:d9:47:70:a2:5c:56:b7:bc:9a:96:
3f:da:72:6e:d9:ce:2a:5e:fe:5d:c9:b9:f6:2d:cb:
8a:df:d3:9b:44:aa:a5:de:c1:fd:70:f8:98:da:d4:
a3:5a:db:97:33:65:36:8c:ba:f6:75:5c:3e:72:08:
d8:d4:cb:eb:64:60:29:48:64:9f:bd:69:4f:13:32:
c0:66:5d:a7:9f:8d:6e:b1:2d:14:24:40:82:ea:31:
41:74:b1:28:47:85:ac:fa:d2:ce:2e:89:61:a8:1c:
76:ce:7e:58:39:5c:4f:0f:8c:37:fe:1b:2d:80:7b:
b5:4f:7b:e3:88:a1:50:bb:06:84:e2:eb:50:e6:bf:
c4:ac:27:9f:82:ba:37:3c:9d:47:64:80:6c:3a:b4:
36:f2:22:53:3b:95:ea:58:db:97:66:c0:b5:2c:f3:
09:17:16:bd:89:56:19:ce:f8:4e:8f:7f:5f:67:5d:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:F8:07:26:20:D1:FA:B7:91:2A:DE:29:0E:E4:89:48:54:2E:53
X509v3 Authority Key Identifier:
keyid:72:17:23:EE:6C:96:BA:E6:32:25:C1:86:52:97:7F:8E:40:4D:BD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/721723EE6C96BAE63225C18652977F8E404DBD28.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/721723EE6C96BAE63225C18652977F8E404DBD28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BA37A459F293C30036216BB44FE99FC147CD8BFFDE2FF3C5E67537287481E60/0/323830313a3162393a353a3a2f34382d3438203d3e20323732393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b9:5::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a9:49:c1:9b:a5:9d:09:76:d1:f3:09:f5:7d:ae:b8:58:db:
6e:14:ee:f5:90:b5:15:9d:86:d2:64:38:a8:a2:99:13:08:26:
a4:9f:19:a9:1c:b2:0e:b9:71:07:64:53:55:4d:d6:1e:67:1d:
14:67:dd:4f:93:1f:33:ee:ed:bc:b5:99:45:a8:c9:79:96:41:
a2:1a:6c:bd:29:02:5b:5e:1b:97:de:83:60:c1:6d:71:79:33:
79:26:de:dd:87:26:9e:8d:6d:3f:74:2f:ca:bb:08:f6:48:1a:
9f:0a:4c:b1:a2:bf:f6:ac:39:b8:64:3d:d6:8b:ed:7e:d4:14:
b5:97:92:4e:ea:d2:d3:a8:cb:24:fe:91:13:2d:c7:a3:b1:ee:
af:61:78:e3:35:9f:ff:30:f7:5b:87:f4:a6:20:90:b8:5e:f8:
97:d1:78:23:ec:fb:e7:31:2f:85:6a:e9:cc:60:b4:78:be:de:
7c:12:8a:bf:54:ac:84:45:4e:0f:fe:da:3a:bf:96:3c:7d:64:
5a:6e:47:58:ac:82:78:fa:39:7a:7a:ee:b8:4c:59:84:a9:a9:
4f:70:1c:76:48:2f:b0:f7:06:bb:16:26:8f:82:67:8e:d0:79:
c8:0b:cc:92:62:65:8d:cc:94:c3:87:f2:3e:d5:a5:65:c1:e2:
8b:54:64:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:01 2025 by rpki-client